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The Advanced Automation System is a distributed real-time system under 
development by IBM's Systems Integration Division for the US Federal Aviation 
Administration. The system is intended to replace the present en-route and 
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In this paper we study the use of precomputed fault dictionaries to diagnose 
stuck-at and bridging defects in the UltraSPARC/sup TM/-I processor. In 
constructing the dictionary we analyze the effect of the dictionary format on 
parameters such as memory size, computational effort, and diagnostic resolution. 
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Dynamic verification of a decision implies that every time the decision is made 
there is a consistency check performed on the decision using independent hardware 
and software. The dynamic verification of operating system decisions is used on the 
PRIME system being designed and constructed at the University of California, 
Berkeley. PRIME is an experimental time-sharing system which is to have the 
properties of continuous availability, data privacy, and cost effectiveness. The 
technique of dy ... 
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The Mark lllfp Hypercube is a new generation of hypercube concurrent processor 
system developed at JPL/Caltech, with peak performance of 5 Mips, 14 Mflops per 
node, and a peak communication rate of 6 Mbytes per second. Each node utilizes 
two Motorola MC68020 microprocessors, an MC68882 scalar floating- point 
coprocessor, and a Weitek 8000 floating-point chip set. One of the MC68020 
processors serves as the application and computational processor, the other is 
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Fault-tolerant electronic sub-systems are becoming a standard requirement in the 
automotive industrial sector as electronics becomes pervasive in present cars. We 
address the issue of fault tolerant chip architectures for automotive applications. 
We begin by reviewing fault-tolerant architectures commonly used in other 
industrial domains where fault-tolerant electronics has been a must for a number of 



years, e.g., the aircraft manufacturing industrial sector. We then proceed to 
investigate how t ... 
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Traditional disk arrays have a centralized architecture, with a single controller 
through which all requests flow. Such a controller is a single point of failure, and its 
performance limits the maximum number of disks to which the array can scale. We 
describe TickerTAIP, a parallel architecture for disk arrays that distributes the 
controller functions across several loosely coupled processors. The result is better 
scalability, fault tolerance, and flexibility.This article present ... 
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The Remote Procedure Call (RPC) paradigm is reviewed. The concept is described, 
along with the backbone structure of the mechanisms that support it. An overview 
of works in supporting these mechanisms is discussed. Extensions to the paradigm 
that have been proposed to enlarge its suitability, are studied. The main 
contributions of this paper are a standard view and classification of RPC 
mechanisms according to different perspectives, and a snapshot of the paradigm in 
use today and of goals for t ... 
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When processes in a network communicate, the messages they exchange define a 
partial ordering of externally visible events. While the significance of this partial 
order in distributed computing is well understood, it has not been made an explicit 
part of the communication substrate upon which distributed programs are 
implemented. This paper describes a new interprocess communication mechanism, 
called Psync, that explicitly encodes this partial ordering with each message. Th ... 
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Transport layer protocols provide for end-to-end communication between two or 
more hosts. This paper presents a tutorial on transport layer concepts and 
terminology, and a survey of transport layer services and protocols. The transport 
layer protocol TCP is used as a reference point, and compared and contrasted with 
nineteen other protocols designed over the past two decades. The service and 
protocol features of twelve of the most important protocols are summarized in both 
text and tables. < ... 
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Efficient synchronization is important for achieving good performance in parallel 
programs, especially on large-scale multiprocessors. Most synchronization 
algorithms have been designed to run on a dedicated machine, with one application 
process per processor, and can suffer serious performance degradation in the 
presence of multiprogramming. Problems arise when running processes block or, 
worse, busy-wait for action on the part of a process that the scheduler has chosen 
not to run. We show ... 
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This paper concerns the fundamental problem of synchronizing communication 
between distributed processes whose speeds (steps per real time unit) vary 
dynamically. Communication must be established in matching pairs, which are 
mutually willing to communicate. We show how to implement a distributed local 
scheduler to find these pairs. The only means of synchronization are boolean "flag" 
variables, each of which can be written by only one process and read by at most 
one other process. No global boun ... 
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Due to shrinking technologies and increasing design sizes, it is becoming more 
difficult and expensive to distribute a global clock signal with low skew throughout a 
processor die. Asynchronous processor designs do not suffer from this problem 
since they do not have a global clock. However, a paradigm shift from synchronous 
to asynchronous is unlikely to happen in the processor industry in the near future. 
Hence the study of Globally Asynchronous Locally Synchronous (or GALS) systems 
is relev nt ... 
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We describe the methodology used for the design of the CMOS processor chipset 
used in the IBM S/390 Parallel Enterprise Server - Generation 3. The majority of 
the logic is implemented by standard cell elements placed and routed flat, using 
timing-driven techniques. The result is a globally optimized solution without 
artificial floorplan boundaries. We will show that the density in terms of transistors 
per mm2 is comparable to the most advanced custom designs and that the impact 
of interconnect d ... 
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This paper describes a new at-most-once message passing protocol that provides 
guaranteed detection of duplicate messages even when the receiver has no state 
stored for the sender. It also discusses how to use at-most-once messages to 
implement higher-level primitives such as at-once-remote procedure calls and 
sequenced bytestream protocols. Our performance measurements indicate that 
at-most-once RPCs can provide at the same cost as less desirable forms of RPCs 
that do not guarantee at-mos ... 
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Andrew is a distributed computing environment that is a synthesis of the personal 
computing and timesharing paradigms. When mature, it is expected to encompass 
over 5,000 workstations spanning the Carnegie Mellon University campus. This 
paper examines the security issues that arise in such an environment and describes 
the mechanisms that have been developed to address them. These mechanisms 
include the logical and physical separation of servers and clients, support for secure 
communication ... 
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